$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft File: DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft (raw, json) Hash identifier: mk7EBpYVbCg4Z7Vuxy8L8IjkmecmOu7VxO5KmSdmmq8= Subject key identifier: FB:9A:92:1C:E1:5E:B6:57:6E:F6:76:D2:F5:67:90:08:3E:95:45:29 Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft Manifest number: 23 Signing time: Mon 03 Nov 2025 07:51:59 +0000 Manifest this update: Mon 03 Nov 2025 07:51:59 +0000 Manifest next update: Mon 10 Nov 2025 07:51:59 +0000 Files and hashes: 1: DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl (hash: LRDZFSxkybLQt4gc2G11tqk6zJUCrXk7s8pR7TxNp7s=) 2: 0919A7B69C4111F0A9483031C4F9AE02.roa (hash: WAKRMBYdCNNPwO0lju5L+3xdfnFpvUpYnLtfFW5BMDI=) 3: 08B79AD09C4111F0A9483031C4F9AE02.roa (hash: pfN97xtI/DeRbJop2c9X92MygEUcxnLoB0XTR1dIrkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Validity Not Before: Nov 3 07:51:59 2025 GMT Not After : Nov 10 07:51:59 2025 GMT Subject: CN=69085f1f-35ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:f5:b5:ae:36:78:05:55:41:11:85:48:10: 71:2a:7d:88:5a:85:f0:1d:8a:3e:28:5d:92:3a:af: d0:56:c7:15:a6:f2:d3:54:7d:4b:bf:9d:ea:c1:71: 54:70:9a:6f:c1:f9:c1:6c:82:f7:37:ef:7f:0c:ba: 8f:9e:2d:31:48:94:1b:cc:5e:8e:a6:99:2b:dd:c1: 32:b2:bd:ef:84:92:da:3a:d9:67:a5:76:a3:ab:3d: a0:80:cd:88:25:f7:c4:9c:2e:6a:33:c4:f8:4d:b7: 89:7c:88:4e:df:c2:d1:fc:a6:c0:c5:99:6a:c6:09: e4:35:cc:ea:f3:c4:a7:bf:25:ce:18:e7:f6:8b:f0: 29:60:70:a1:1e:6a:28:ca:d4:5d:d0:47:05:25:8d: 78:46:71:33:64:70:8c:94:36:fc:6d:0f:e9:9b:d5: 4c:d7:fa:38:69:5e:78:d9:ad:8d:35:f1:31:7f:6e: 1f:1c:6c:7e:3e:f5:96:d1:f0:5f:87:e2:b9:93:e0: 23:70:79:96:e7:fb:fc:11:f2:4e:7a:e6:5c:9b:6c: d7:ff:1b:cc:64:f0:93:c2:c4:f8:42:71:15:60:bc: f6:7e:a2:66:23:b5:a7:87:24:81:b3:8b:31:cd:19: e8:49:92:69:3d:24:ea:34:f9:55:dd:2a:cc:a2:ad: 10:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9A:92:1C:E1:5E:B6:57:6E:F6:76:D2:F5:67:90:08:3E:95:45:29 X509v3 Authority Key Identifier: keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c9:98:84:a9:06:b9:ea:90:df:07:90:ea:c1:61:f0:8e:0d: 05:32:3b:6b:67:dc:b1:da:82:55:6a:df:17:c7:2a:27:87:12: a0:3a:fc:b2:0f:25:9f:ff:ed:a6:f2:45:b1:8e:40:81:21:bf: 26:2e:73:04:02:20:1a:ab:5a:dc:ee:2c:3a:13:20:b9:e0:00: ac:11:6d:4b:a5:4d:07:60:7c:fb:e2:fb:6a:a5:bb:bf:71:fa: bb:ca:85:a2:61:b8:b5:06:b4:5d:cf:fe:05:18:dc:80:98:37: a7:2d:95:6d:5e:04:17:9c:ef:27:d2:76:c8:de:a9:dd:04:93: 12:76:80:6f:02:ee:01:6d:ce:b7:03:95:9d:9f:15:b7:09:3f: d0:ca:af:1c:05:4f:61:0a:d9:67:b6:42:ce:64:ed:74:8e:25: 6c:00:56:86:de:cf:fa:f4:e6:aa:8c:ba:cf:93:bb:45:d7:f3: 80:ef:ec:7e:51:cc:31:8a:4f:54:29:5a:9d:13:35:18:94:1c: fe:4f:e4:a2:4e:cd:8a:d3:3e:f6:83:82:cd:43:6a:60:1a:a6: 14:c3:17:f8:e7:74:81:89:14:62:43:3b:b4:7b:9a:16:7f:99: 2c:8c:a1:47:3e:de:29:cd:0f:09:13:13:ac:14:35:91:08:e3: 7f:66:a3:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUQxRjExMC8GA1UEBRMoMENBQjY4RTA2OTA4M0E0Mzg4RThGQzY5NzU4RjA0NTk2 MkZEMDFBRjAeFw0yNTExMDMwNzUxNTlaFw0yNTExMTAwNzUxNTlaMBgxFjAUBgNV BAMTDTY5MDg1ZjFmLTM1ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1yPW1rjZ4BVVBEYVIEHEqfYhahfAdij4oXZI6r9BWxxWm8tNUfUu/nerBcVRw mm/B+cFsgvc3738Muo+eLTFIlBvMXo6mmSvdwTKyve+Ekto62WeldqOrPaCAzYgl 98ScLmozxPhNt4l8iE7fwtH8psDFmWrGCeQ1zOrzxKe/Jc4Y5/aL8ClgcKEeaijK 1F3QRwUljXhGcTNkcIyUNvxtD+mb1UzX+jhpXnjZrY018TF/bh8cbH4+9ZbR8F+H 4rmT4CNweZbn+/wR8k565lybbNf/G8xk8JPCxPhCcRVgvPZ+omYjtaeHJIGzizHN GehJkmk9JOo0+VXdKsyirRC1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+5qSHOFe tldu9nbS9WeQCD6VRSkwHwYDVR0jBBgwFoAUDKto4GkIOkOI6PxpdY8EWWL9Aa8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RDFGL0FEMjAyMUE0OTc3 NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFh OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREt0bzRHa0lPa09JNlB4cGRZOEVXV0w5QWE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RDFGL0FEMjAyMUE0OTc3NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tP STZQeHBkWThFV1dMOUFhOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIjJmISpBrnqkN8HkOrBYfCODQUyO2tn3LHaglVq3xfHKieHEqA6/LIP JZ//7abyRbGOQIEhvyYucwQCIBqrWtzuLDoTILngAKwRbUulTQdgfPvi+2qlu79x +rvKhaJhuLUGtF3P/gUY3ICYN6ctlW1eBBec7yfSdsjeqd0EkxJ2gG8C7gFtzrcD lZ2fFbcJP9DKrxwFT2EK2We2Qs5k7XSOJWwAVobez/r05qqMus+Tu0XX84Dv7H5R zDGKT1QpWp0TNRiUHP5P5KJOzYrTPvaDgs1DamAaphTDF/jndIGJFGJDO7R7mhZ/ mSyMoUc+3inNDwkTE6wUNZEI439mowk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:42:19 2025 by rpki-client